CVE-2026-13086

published 2026-08-28

CVE-2026-13086: A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows…

Priority P2 69 critical 9.3 CVSS 4.0

AV N AC L AT N PR N UI N VC H VI H VA H SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows an unauthenticated remote attacker to execute arbitrary code.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
watchguard	fireware_os	>= 12.0 < 12.12.2	12.12.2
watchguard	fireware_os	>= 12.0 < 12.5.20	12.5.20
watchguard	fireware_os	>= 2025.0 < 2026.2.2	2026.2.2
watchguard	fireware_os	>= 2026.3 < 2026.3.1	2026.3.1

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-121 CWE-787 CWE-798